mkimage-profiles/image.in/image-scripts.d/99-tcb-fix
Michael Shigorin 5427f3afdc image.in, stage2: reworked TCB fixup hook
The issue at hand is that:

/etc/tcb/USER/shadow gets USER:auth ownership (OK);
/etc/tcb/USER/shadow- backup file is root:root (broken);
/etc/tcb/USER/shadow.lock file is also root:root (broken).

This is observed for all pseudousers created by package installation
process within working chroots as well as for users created by deflogin
feature; the problem is that e.g. echo USER:PASS | chpasswd will break.

Looks like the cuplrit might be fakeroot/faked.
2015-11-16 20:24:25 +03:00

6 lines
156 B
Bash
Executable File

#!/bin/sh -e
# drop intermediate files not needed in the image
# which receive broken permissions in fakeroot environment
rm -f /etc/tcb/*/shadow{-,.lock}